Please refer to the AD Lab user guide for detailed instructions on how to perform the actions below.

The following should be done on all machines running the Lab examiner.

  1. Launch AD Lab (as Administrator).
  2. When prompted, enter the appropriate database information fo Lab.
  3. Log in as an Application Administrator, or, if this is the first time connecting any products to that database, follow prompts to create the initial Application Administrator user.
  4. Go to Tools > Preferences.
  5. Set "Choose temporary file path" to the desired location for ADTemp.
  6. If you will be using the KFF, click "Configure KFF", point it to the ElasticSearch server, and click "Test" and "Save".
  7. Select Case > New.
  8. Enter a "Case Name".
  9. Ensure the "Case Folder Directory" in a UNC path to which the service account and the Windows account running Lab have full access.
  10. Ensure the "Processing Manager" drop-down is properly configured for the Distributed Processing Manager.
  11. Click "OK" to create and open the case.
  12. Go to Evidence > Add/Remove.
  13. Select any evidence you'd like to test with.  The path must be a UNC path to which the service account and Windows account running Lab have full access.
  14. Confirm that the selected evidence finishes processing.

Notes:

  • All paths used in Lab should be UNC paths to which the service account and the Windows account running Lab have full access.
  • In any case creation or job dialogs always ensure the "Processing Manager" drop-down is pointed to the machine running the Distributed Processing Manager.